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Abstract —In this paper, we investigate secure and reliable 
transmission strategies for multi-cell multi-user massive multiple- 
input multiple-output (MIMO) systems with a multi-antenna 
active eavesdropper. We consider a time-division duplex system 
where uplink training is required and an active eavesdropper 
can attack the training phase to cause pilot contamination at 
the transmitter. This forces the precoder used in the subsequent 
downlink transmission phase to implicitly beamform towards the 
eavesdropper, thus increasing its received signal power. Assuming 
matched filter precoding and artificial noise (AN) generation at 
the transmitter, we derive an asymptotic achievable secrecy rate 
when the number of transmit antennas approaches infinity. For 
the case of a single-antenna active eavesdropper, we obtain a 
closed-form expression for the optimal power allocation policy for 
the transmit signal and the AN, and find the minimum transmit 
power required to ensure reliable secure communication. Fur¬ 
thermore, we show that the transmit antenna correlation diversity 
of the intended users and the eavesdropper can be exploited 
in order to improve the secrecy rate. In fact, under certain 
orthogonality conditions of the channel covariance matrices, 
the secrecy rate loss introduced by the eavesdropper can be 
completely mitigated. 


1. Introduction 

The emergence of smart mobile devices such as smart 
phones and wireless modems has led to an exponential in¬ 
crease in the demand for wireless data services. A recent and 
promising solution to meet this demand is massive multiple- 
input multiple-output (MIMO) technology, which utilizes a 
very large number of antennas and simple signal processing 
at the base station (BS) to serve a comparatively small (with 
respective to the number of antennas) number of users. The 
field of massive MIMO communication systems was initiated 
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by the pioneering work in [1] which considered multi-cell 
multi-user time-division duplex (TDD) communication. The 
key idea in [1] is that as the number of transmit antennas 
increases, the effects of uncorrelated receiver noise and fast 
fading vanish due to the law of large numbers. Then, the 
only residual interference is caused by the reuse of the same 
pilot sequences in adjacent cells. This effect is known as pilot 
contamination. Since the publication of [1], a considerable 
amount of research has been dedicated to studying various 
aspects of massive MIMO systems [2-10]. In particular, A. 
Adhikary et al and C. Sun et al design transmission schemes 
to serve different users in orthogonal spatial resources by 
exploiting the unique property of the massive MIMO chan¬ 
nels in [4] and [8], respectively, which inspire a null space 
design for secure massive MIMO transmission in this paper. 
Also, massive MIMO has been investigated for various types 
of systems, including: Single-cell multi-user uplink/downlink 
systems [11-13], multi-cell multi-user uplink/dowlink systems 
[14,15], orthogonal frequency-division multiple access sys¬ 
tems [16-18], non-orthogonal multiple access systems [19], 
and systems employing constant-envelope signals [20]. 

The broadcast nature of the wireless channel makes it 
inherently prone to security breaches such as eavesdropping 
and jamming, which jeopardizes the privacy of communication 
in wireless networks. In order to maintain the required level 
of privacy, appropriate signal and information processing tech¬ 
niques have to be employed to ensure reliable and secure com¬ 
munication. Traditional approaches to secure communication 
for preventing unauthorized reception by eavesdroppers rely 
on cryptographic encryption implemented in the application 
layer. These methods may entail a relatively high complexity 
due to the required key distribution and service management 
[21]. As a complement to cryptographic methods, physical 
layer security, which considers communication security from 
an information-theoretic perspective, has attracted significant 
research interest recently. In Wyner’s pioneering work on 
information-theoretic security, a “wiretap channel” model 
was defined along with the associated secrecy capacity [22]. 
Wyner’s work indicates that the transmitter can reliably send 
a private message to the receiver, which cannot be decoded by 
the eavesdropper, if the channel of the eavesdropper is a de¬ 
graded version of the channel of the desired receiver. Wyner’s 
result was extended to more general non-degraded channels 
in [23]. More recent studies have investigated the capacity 
and precoder design for multi-antenna wiretap channels [24- 
32]. In particular, if only imperfect channel state information 
(CSI) of the eavesdropper is available at the transmitter, it is 
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advantageous to transmit artificial noise (AN) along with the 
information-carrying signal to interfere the decoding process 
at the eavesdropper [33-36]. In [37], the authors propose a 
thorough analysis and optimization framework for artificial 
noise assisted secure transmission in a MIMO wiretap channel. 

Physical layer security for massive MIMO systems with 
passive eavesdroppers has been recently studied. The authors 
in [39] first applied the technique of large-scale antenna 
array into physical layer security, and investigate the limiting 
performance while the number of antennas approached infinity. 
Secure massive MIMO transmissions for multi-cell multi¬ 
user systems with imperfect CSI have been investigated in 
[40,41], where a passive eavesdropper attempts to decode 
the information sent to one of the users. In [42], a com¬ 
prehensive performance analysis of AN aided multi-antenna 
secure transmission in multi-cell multi-user systems under a 
stochastic geometry framework is provided. In [39-42], it was 
assumed that the channel gains of both the desired receiver and 
the eavesdropper are independent and identically distributed 
(i.i.d.). 

Most existing studies on physical layer security assume 
that perfect CSI of the legitimate channel is available at the 
transmitter and do not consider the channel training phase 
required to acquire the CSI. However, in TDD communication 
systems, the BS needs to estimate the channel for the subse¬ 
quent downlink transmission based on pilot sequences sent by 
the users in an uplink training phase. Furthermore, the low 
rank property of massive MIMO channels has been exploited 
in [38] to significantly save the pilot training overhead and 
reduce the signal processing complexity at users to achieve 
reliable CSI at the BS. As a result, a smart eavesdropper might 
actively attack this channel training phase by sending the same 
pilot sequences as the users to cause pilot contamination at 
the transmitter, which improves the eavesdropping capability 
of the eavesdropper significantly [43]. 

Hence, the so-called pilot contamination attack poses a se¬ 
rious secrecy threat to TDD-based massive MIMO systems. In 
such systems, the channel hardening due to beamforming with 
large antenna arrays [2] makes the exploitation of statistical 
fiuctuations due to fading for secrecy enhancement impossi¬ 
ble. Furthermore, the pilot contamination attack directs the 
transmitter beamforming to the advantage of the eavesdropper. 
Therefore, for a sufficiently large eavesdropper pilot power, the 
achievable secrecy rate may approach zero. This goes against 
the conventional wisdom [5] that massive MIMO inherently 
facilitates secure communication because the base station can 
form very narrow beams focusing on the target users and 
therefore avoiding spill over of the signal power in other 
directions. 

A single cell massive MIMO system with an active eaves¬ 
dropper was investigated for i.i.d. fading channels [44-46]. 
However, systematic approaches for combating the pilot con¬ 
tamination attack of a multi-antenna active eavesdropper and 
maintaining secrecy of communication in correlated fading 
channels were not provided in [44-46] and have not been 
studied in the literature, yet. 

In this paper, we study secure transmission over correlated 
fading channels in TDD multi-cell multi-user massive MIMO 


systems in the presence of a multi-antenna active eavesdropper. 
We assume that in the uplink training phase, the active 
eavesdropper sends the same pilot sequence as the desired 
receiver to impair the channel estimation at the transmitter, i.e., 
to cause pilot contamination at the transmitter. Subsequently, 
the transmitter uses the estimated channel for calculation of 
the precoder for downlink transmission. This paper makes the 
following key contributions: 

1) We introduce a pilot contamination precoder, which 
allows the eavesdropper to optimize its attack. The 
proposed pilot contamination precoder is provided in 
closed form and maximizes the total average estimation 
error variance of the desired user’s channel. 

2) We derive a closed-form expression for the asymp¬ 
totic achievable secrecy rate for TDD multi-cell multi¬ 
user massive MIMO systems employing matched filter 
precoding and AN generation (we refer to this de¬ 
sign as MF-AN design) at the transmitter to combat a 
multi-antenna active eavesdropper. Based on the derived 
asymptotic expression, which is valid if the number of 
transmit antennas tends to infinity, the optimal power 
allocation policy for the information signal and the AN 
can be found by a simple one-dimension numerical 
search. Then, we show that, in the presence of an active 
eavesdropper, the secrecy rate is not a monotonically 
increasing function of the signal-to-noise ratio (SNR). 
For the special case of a single-antenna eavesdropper, 
we obtain the optimal power allocation policy for the 
transmit signal and the AN in closed form. In addition, 
we obtain the minimum transmit signal power required 
to ensure secure transmission. 

3) For the case of correlated fading channels, we reveal 
that the impact of the active eavesdropper vanishes when 
the signal space (i.e., the span of the eigenvectors of 
the channel correlation matrix that correspond to non¬ 
zero eigenvalues) of the users and the eavesdropper are 
mutually orthogonal. Inspired by this observation, we 
exploit the low rank property of the transmit correlation 
matrices of massive MIMO channels [3,4,6-8,10,38] 
to design an efficient precoding scheme that transmits 
in the null space (NS) of the transmit correlation matrix 
of the eavesdropper (we refer to this precoding solution 
as NS design). Unlike the conventional NS design for 
the perfect CSI case [24], the proposed NS design can 
completely remove the impact of the pilot contamina¬ 
tion attack by performing joint uplink and downlink 
processing. For the special case of a single-antenna 
eavesdropper, we derive a threshold that can be used 
to determine whether the MF-AN design or the NS 
design is preferable for given channel and eavesdropper 
parameters. 

4) We propose a unified design which combines the MF- 
AN design and the NS design. Numerical results indicate 
that the proposed unified design can effectively mitigate 
the pilot contamination attack of an active eavesdropper 
in massive MIMO systems. 

The remainder of this paper is organized as follows. In 
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Section II, we introduce the adopted multi-cell multi-user 
massive MIMO system model with a multi-antenna active 
eavesdropper. In Section III, we derive an expression for the 
asymptotic achievable secrecy rate for the MF-AN design 
when the number of transmit antennas tends to infinity. Based 
on this expression, we derive transmission strategies to combat 
the pilot contamination attack from the active eavesdropper. In 
Section IV, we provide several novel insights for the single¬ 
antenna eavesdropper case. Numerical results are presented in 
Section V, and the main results are summarized in Section VI. 

Notation: Vectors are denoted by lower-case bold-face let¬ 
ters; matrices are denoted by upper-case bold-face letters. 
Superscripts (•)^, (•)*, and (•)^ stand for the matrix transpose, 
conjugate, and conjugate-transpose operations, respectively. 
We use tr(A) and to denote the trace operation and the 
inverse of matrix A, respectively. || • || and | • | denote the 
Euclidean norm of a matrix/vector and a scalar, respectively, 
diag {b} denotes a diagonal matrix with the elements of vector 
b on its main diagonal, vec (A) stacks all columns of matrix 
A into a vector. The MxM identity matrix is denoted by 1m, 
and the all-zero M x N matrix and N xl vector are denoted 
by 0. The field of complex numbers is denoted by C and 
E [•] denotes statistical expectation. We use x ^ CA/’(0, Rat) 
to denote a circularly symmetric complex Gaussian vector 
X G with zero mean and covariance matrix Rat. Based 

on [49, Definition II.l], we use X ^ CA/" (0, Rat 0 Rm) 
to denote a circularly symmetric complex Gaussian matrix 
X G with zero mean and covariance matrix 

{A}^^ returns the element of matrix A in the ith row and the 
jth column. Iat denotes an A x 1 vector with all elements 
equal to 1. denotes the unit-vector with a one as the rth 
element and zeros for all other elements. stands for 

max {0, x}, (g) denotes the Kronecker product, and A B 
means that A converges almost surely to 5 as A goes to 
infinity. 


II. System Model 

We consider a multi-cell multi-user system with L + 1 
cells, cf. Figure 1. Each cell contains a BS equipped with 
At antennas and K single-antenna users. Without loss of 
generality, we denote the reference cell by / = 0. An active 
eavesdropper with Ae antennas (equivalent to Ag coopera¬ 
tive single-antenna eavesdroppers) is located in the reference 
cell. The eavesdropper seeks to recover the private message 
intended for a specific target user m. 

A. Uplink Training and Channel Estimation 

In the uplink training and channel estimation phase, the 
received signal Yq G at the BS in the reference cell is 

given by [3] 

Yo = ^ + E E 

k=l 1=1 k=l 

+ ^U%FeWe + -N. ( 1 ) 


Here, Pik and ujik G are the average transmit power 

and the pilot sequence of the /cth user in the Ith cell, 
where r denotes the length of the pilot sequence, = 
G denotes the channel vector between 

the kth user in the Ith cell and the BS in the pth cell, where 
^ CA(0,lArJ and Rj^^ G is the correlation 

matrix of channel hfj^. Pe denotes the average transmit 
power of the eavesdropper when attacking the uplink training. 

^ £NtxNe (tenotes the 
channel between the eavesdropper and the BS in the Ith 
cell, where ^ CN' {0,lNt ^ and 

R^ E ^ ^ are the transmit and receive correlation 

matrices of channel The active eavesdropper attacks the 
channel estimation process of the mth user in the reference 
cell by sending pilot contamination sequences PgWe, where 
is the pilot contamination precoder and 
We = , ^0 G N G is a 

Gaussian noise matrix with i.i.d. elements of zero-mean and 
variance Aq. The structure of the uplink received signal at the 
BS in the local cell is illustrated in Figure 2. 

Eq. (1) can be rewritten as 

K 

yo = E i^ok 0 livj h^fc 

k=l 

L K 

+ EE \/Pik {^ik Iat* ) 

1=1 k=l 

I Prp 

+ yjE ® ) E + n, (2) 

^ ® r=l 

where yo = vec(Yo), n = vec(N), and ^ denotes the 
rth column of matrix H^Pg, I = O,!,**' ,1/. We assume 
that the same K orthogonal pilot sequences are used by the 
K users in each cell [1], i.e., cjq/c = ^ik = • • • = = ^k, 

= r, (jjflujip = 0, V/c 7 ^ p. Then, the minimum mean 
square error (MMSE) estimate of is given by [50] 

^Om ~ Pom^Om ^ Ptm^tm 

-fP£;r^ yom, (3) 


where 


yom 


VPomrh^m + E G PtmTh' 


0 

tm 


t=l 



Ne 


■ E 


r=l 


T 

'livj n 


(4) 


and = GE;=iE;=i{PfRkflPe},,, I = 

0,1) • ■ ■ jL. The actual channel vector can be writ¬ 


ten as 


Om 

= hg^ + On^, where the estimated chan¬ 


nel hn 


Om 


CV(o,RO„) 


and the estimation error Og^ 


CAf ^0, Rg^ — Rg^^ are mutually independent. Correlation 
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Fig. 1: Model of considered multi-cell massive MIMO system. 


matrix Rq^ is given by 


■rO _ p 

■^Om ~ '-Ttom 

X (^olNt + r t Rq, 


'Om • 


Vt=0 


^Im ~ 

X I A^oIat* + ^ ( ^ + Pe'^e,r^^e, 


Hm 

L 


T I yim, 


Kt=0 


yim — 's/ Plm^^lm ^ ^ 


\m 


+ x/W'^ H ^E,r + 0 livj^n (7) 


Ne 




and 


(5) h;j. = I A/oIjVt + T y^PtfcRjfc j yik, (8) 


Similarly, the MMSE channel estimates for the mth user and 
the kth user, k = 1 , 2 , • • • , Ff, /c 7 ^ m, in the Ith cell, I = 
0 , 1 , • • • , 1 /, are given by 


\ t=o / 

L 

yik = V^rhJ^. + y]] + (wfc O IjvJ^n, 

(9) 

respectively. Furthermore, the correlation matrices of h\^ and 
are obtained as 


X j NolNt + ^ ^ + PErE,R^E,T ] ] 


I 

im 


( 6 ) 


^t=o 


( 10 ) 
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Fig. 2: Structure of uplink received signal at the BS in the local cell. 


and 

^\k = Pikr'R\k(^^o'^Nt 
respectively. 

Remark 1: We assume that the correlation matrices 
of the users and r^e t the eavesdropper are perfectly 
known at the legitimate transmitter, see (3), (6), (8). In 
this context, we note that for massive MIMO systems, it is 
reasonable to assume that the statistical CSI of the users of the 
system is known at the BS [3,47]. Hence, our system model 
is applicable to the case where the BS attempts to transmit a 
private message to some users while treating the other users 
as eavesdroppers, i.e., the eavesdropper is an idle user of the 
system. Therefore, the statistical CSI of the eavesdropper can 
be assumed to be known. Nevertheless, the assumption that 
the statistical CSI of the active eavesdropper is available at 
the transmitter may also be reasonable if the eavesdropper 
is not an idle user. In particular, we can obtain E [yimYi^] 
by averaging yim over different data slots. Eq. (7) suggests 
that E [yimyi^] is the sum of the correlation matrices of 
all users, the eavesdropper, and the noise. Then, r^e t 
can be obtained by subtracting the correlation matrices of the 
legitimate users and the noise from E [yirnyf^] • 

Remark 2: For conventional massive MIMO systems with 
pilot contamination but without active eavesdropping [1,2], 
the term Pet% r^e t i^ present in (3). In this case, the 
BS can employ a user scheduling scheme [3,6] to control 
the pilot contamination and reduce the impact of Ptm^tm 
in (3). However, this is not possible for active eavesdropping 
and the term Pet% r^e t avoided. This is 

an important difference between conventional massive MIMO 
systems and the system considered in this paper. 


The eavesdropper can optimize its pilot contamination 
precoder Pe to conduct a best possible attack. Since the 
precoder is computed based on the estimated channel, the 
leakage of the desired signal will increase when the channel 
estimation error increases. Therefore, from the eavesdropper’s 
perspective, the pilot contamination attack should impair the 
accuracy of the channel estimation as much as possible. As 
a result, the eavesdropper should optimize Pe such that the 
total average estimation error tr ~ maximized. 

From (5), we observe that the total average estimation error 
tr ^Rom “ ^ monotonically increasing function of 

i?- Hence, maximizing ^ is desirable. Therefore, finding 
the pilot contamination precoder Pe amounts to solving the 
following optimization problem 

Ne Ne 

( 12 ) 

® r=ls=l 

S.t. tr (PeWeWf Pf) < NeT. 

Let Pe = [pi, P 2 , • • • , PJVe]> where p^ e is the sth 

column of Pe. Then, we have the following theorem. 

Theorem 1: The optimal pilot contamination precoder Pe 
which solves (12) has to satisfy the following condition 

Ne 

EPs = \/i^Ue (13) 

S = 1 

where Ue G is the eigenvector corresponding to the 

largest eigenvalue of R^ 

Proof: Please refer to Appendix A. ■ 

Theorem 1 indicates that transmitting the pilot sequence 
along the direction of the eigenvector corresponding to the 
maximum eigenvalue of the receive correlation matrix of the 
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eavesdropper’s channel constitutes the best possible attack 
strategy from the eavesdropper’s point of view. 


B. Downlink Data Transmission 

For the data transmission phase, we assume that the BSs 
in all L + 1 cells perform jamming to prevent eavesdropping 
in their own cells. Then, the transmit signal in the Ith cell, 
/ = 0,1, • • • , I/, is given by 


K 


XI = VP VP y] + v^Unull, 


(14) 


fe=l 


where P is the average transmit power for downlink 
transmission, sik is the transmit signal for the kth user in the 
Ith cell with [|5//cp] =1, and p and q denote the fractions 
of power allocated to transmit signal and AN, respectively. 
To avoid the high implementation complexity associated with 
the matrix inversion required for zero forcing and MMSE 
precoding 148], in this paper, we adopt simple matched filter 
precoding, as is typical for massive MIMO systems 11,2, 
40]. Thus, we set ssrik = y-py for the precoding vector of 

the kth user in the Ith cell. Furthermore, in (14), Unuii,/ 
and zi CJV {0,1 Nt) denote the AN shaping matrix and 
the AN vector in the Ith cell, respectively. We introduce 
HJ = h| 2 , • • • 5 notational simplicity. If the AN 

shaping matrix is chosen as the NS of Hj as is conventionally 
done 133], for each new channel estimate, a matrix inversion is 
needed to compute the AN shaping matrix. This leads to a high 
implementation complexity considering the large numbers of 
antennas in massive MIMO. Thus, to keep the implementation 
complexity low despite the large numbers of antennas, we 
adopt for the AN shaping matrix the asymptotic NS of 
HJ. In particular, since based on 152, Corollary 1] we have 


t(fii) 


H 


A 

we 




set 


Tiding 

UnulLZ 


tr 


dr 5*'' dr ’ 




H'diag ,tr(A) 

It can be shown that 152, Corollary 1] 


-1 


,tr 


(hi)''. 


1 




N, 


null, I 


(15) 




Based on (14), (15), and the expression for wi^, we set KpP 

{Nt — K)q = 1 to ensure x^xz p. 

The received signals at the mth user in the reference cell, 
yom, and at the eavesdropper, yeve ^ are given by 


The structure of the downlink received signal at the desired 
user and the eavesdropper is illustrated in Figure 3. 

In order to illustrate the secrecy threat that the pilot contam¬ 
ination attack poses for massive MIMO systems, we simulate 
the secrecy rate for MF precoding without AN generation^ (i.e., 
p = 1, g = 0) in the following example. 

Example 1: Let Nt = 128, = 1, L = ?>, K = b, 

Pik = 1, V/c, V/, Pe = 0.5, and Nq = 1. The achievable 
ergodic secrecy rate 140] of a massive MIMO system with 
MF precoding without AN generation is shown in Table I for 
i.i.d. fading and different SNR values. 

The results in Table I reveal that even if the pilot power 
of the eavesdropper is only half of the pilot power of the 
desired user and the eavesdropper has only a single antenna, 
zero secrecy rate may result. 

III. Massive MIMO Signal Design for Combating 
THE Pilot Contamination Attack 

In this section, we investigate three signal designs for com¬ 
bating the pilot contamination attack by an active eavesdropper 
in a multi-cell multi-user massive MIMO system. 


A. MF-AN Design 

An achievable ergodic secrecy rate of the massive MIMO 
system described in Section II is given by 140] 


-^sec — [-^( 


Om 


a 


1+ 


(18) 


where i^om and Ceve denote an achievable ergodic rate be¬ 
tween the BS and the mth user and the ergodic capacity be¬ 
tween the BS and the eavesdropper in the 0th cell, respectively. 
The achievable ergodic rate i?om is given by 140, Eq. (8)] 


-^Om — E [log 2 (1 + SINRo,„)] (19) 


where SINRom is given by 


SINRo™ = 



( 20 ) 


K 


(hO^)"'u„,n,o 


A=pj |(hL) wo/c| +^7 

k=l,k^m 

|(hL)^Wife| |(hL)^Unuii, 


1=1 k=l 


1=1 


+ 1 . 
( 21 ) 


L 

yom = E, ('^Om) + ^Om (16) 


L 

Yeve = L] (Hfi) X; + Heve, (17) 

1=0 

respectively. Here, nom and neve ^ C^eXi zero-mean 
Gaussian noise processes with variance A'o,d and covariance 
matrix respectively. We define the signal-to-noise 

ratio (SNR) for downlink data transmission as 7 = P/Ao,d- 


In this paper, we make the pessimistic assumption that 
the eavesdropper has perfect knowledge of its own channel 
and is able to decode and cancel the signals of all intra¬ 
cell and inter-cell users from the received signal yeve in 
(17) except for the signal intended for the mth user in the 
0th cell. This assumption results in an upper bound on the 
eavesdropper’s capacity, and consequently, in a lower bound 
on the ergodic secrecy rate. If the eavesdropper has access 
to the data of all intra-cell and inter-cell interfering users, 

^MF precoding without AN generation is often adopted in massive MIMO 
systems without secrecy consideration [1,2], 
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Fig. 3: Structure of the downlink received signal for the desired user and the eavesdropper. 


TABLE I: The achievable secrecy rate for different SNR values. 


7(dB) 

-10 

-8 

-6 

-4 

-2 

0 

Secrecy Rate (b/s/Hz) 

0.3828 

0.4097 

0.3807 

0.2759 

0.0822 

0 


this low bound is achievable. This might be the case if the 
interfering users cooperate with the eavesdropper. We note that 
this assumption constitutes a worst-case scenario. Hence, if 
secure communication can be achieved for this worst case, 
then secure communication can also be achieved for more 
optimistic settings (e.g. when the eavesdropper cannot mitigate 
all multi-user interference). Considering the worst case, Ceve 
can be expressed as [40, Eq. (7)] 


where 

L 

Q = lilE + liv. (23) 

1=0 

denotes the noise correlation matrix at the eavesdropper. 

In the following theorem, we provide an asymptotic achiev¬ 
able secrecy rate expression when the number of transmit 
antennas Nt tends to infinity. For convenience, the notation 
used in the theorem is summarized in Table II. 


Ceve 

= E 

= E 


log2 (l+P7(wom)^H|;Q 


log2 


1 + 


PI 


UO 




( 22 ) 


Theorem 2: An asymptotic achievable secrecy rate for a 
multi-cell multi-user massive MIMO system employing the 
MF-AN design to overcome a multi-antenna active eavesdrop¬ 
per is given by 


i?sec,asy [log 2 (1 + SINRo„,asy) 

~log2 (1 + SINReve, asy)]"*" i (24) 








































































TABLE II: Notation used in Theorem 2, 


Notation 

Description 

SINRom, asy 

Output SINK of the desired user in the asymptotic regime Nt ^ oo 

SINReve, asy 

Output SINR of the eavesdropper in the asymptotic regime Nt ^ oo 

Om 

Power of signal intended for the mth user in the 0th cell received by the desired user 

0b,p 

Power of multi-user interference at the desired user 

0b,q 

Power of the AN at the desired user 

^^Om. 

Power of the signal intended for the mth user in the Ith cell received at the desired user 

Qasy 

Power of AN received at the eavesdropper 

77^. 

hj 

Power of the signal intended for the mth user in the 0th cell received at the eavesdropper 

f ■ 

n.l 

Power of the signal intended for the mth user in the Ith cell received at the eavesdropper 


where 


with 


SINRom, asy 

SINReve.asy 


PlOm 


Pl^b,p + 97 ^ 6,9 + 1 ’ 
PlOe 



(25) 

(26) 


Om = 


tr(R0^)+tr(R0„) \r((R0 


_ -rO 

'Om ^Om 


rL) 

(27) 


where 




L, 

= r2{R^,^},. (r'£;,^CLR*„(CL)'') 


t = 0 




Ne 


Ne 


r=l 


iVor{R^,^}^ ,tr ( 


n^^rCLiCLf) (33) 


and Qasy = QjEiLqQi + Matrix Q; e has 

elements 


~ ^ ^ tr 

1=0 k=l,k^m 

L 

+ ^tr(RL) AL (28) 

1 = 1 

L L K 

Z] tr(R^fe) tr(R[)„Rjfc) 

1=0 1=0 k=l,kj^m 

L 

-^tr(RL) AL- (29) 

/=0 

Here, Aq^ in (28) and (29) is given by 

AL = T^Pom\tr (CLrL) r+riVotr (rLcL(CL)'') 

L 

+ T^Y1 Ptrntr (rLCLRL (CL) 

t=l 

+ T^PEr%^H^r (RLcLRkT(CL)'') 

(30) 


{QJij — {^E,R}ij^^ {^E,t) 



ij 


— 1 —1 

k=l,k^m 

(34) 


Proof: Please refer to Appendix B. ■ 

Theorem 2 provides an expression for the general asymp¬ 
totic achievable secrecy rate for Nf ^ oo, which is valid for 
arbitrary p and q. In practice, the optimal p can be found by 
performing a simple one dimensional numerical search in the 
interval 0 < p < for maximization of (24). For the special 
case of a single-antenna eavesdropper, the optimal p can be 
obtained in closed form, c.f. Section IV-A. 

For the conventional secrecy problem existing in multiple- 
input, single-output systems with multiple-antenna passive 
eavesdroppers [24], the optimal transmission design does not 
require AN generation and the secrecy rate increases for 
increasing SNR. To illustrate the importance of AN generation 
when an active eavesdropper is present, we introduce the 
following theorem. 

Theorem 3: For the case without AN generation where p = 
Rsec,asy in (24) is a monotonically decreasing function of 
7 for 7 > 7th, where 




Im 

L 


-1 


X + E 

IS + PEr^E,B^^Ea 

Furthermore, 0^ in (26) is given by 

Ne Ne 

^« = ZZ{Qasy}ii^°i’ 

j=l j=l 


(31) 


(32) 


Tth 


with 


-^b,p^e + ^b,p^e + {^b,p + ^m) ~ ^b,p^e 


{^byP “t“ ^m) ^byP^e 


(35) 


iVe 




0e = 


tr 


(36) 
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Proof: Please refer to Appendix C. ■ 

Remark 3: Theorem 3 indicates that in the presence of 
an active eavesdropper, the secrecy rate will decrease for 
increasing SNR in the high SNR regime if all the available 
power at the BS is allocated to the information-carrying 
signals. This behaviour is very different from that of multiple- 
antenna systems with passive eavesdroppers [24], where the 
secrecy rate is a monotonically increasing function of the SNR 
throughout the entire SNR region even if AN is not employed. 
However, for the case considered in this paper, the BS relies 
on estimated CSI for precoder design, which is contaminated 
by the attack of the active eavesdropper. Since the BS cannot 
distinguish the actual channel of the desired user from the 
eavesdropper channel, the precoder may implicitly beamform 
the information signal towards the eavesdropper. As a result, 
the capacity of the eavesdropper may increase faster than 
the achievable rate of the desired user as the transmit power 
increases. Hence, it is advantageous if a fraction of power is 
used to generate AN to degrade the eavesdropper’s ability to 
decode the transmit signal intended for the desired user. This 
is the motivation behind the MF-AN design. 


^Om) 


^6,g,orth ^ ^ (^0 

/=0 

L K 

L ^ -1 

^ ^ r orth^ Ao777,,orth (40) 


1=0 k=l,kj^m 


1=0 


a; 


0m,orth ~ ^ ^0m|tr (^Zm,orth^( 


'Om) 


yy PtmX^ Zm,orth^tm (^/m,orth) ^ 


t=l 




rNotr (^. 


■p i f^i 


(CL.orth)'') (41) 


-1 


^Zm,orth V Plrri^lm ( ^o'^Nt + ^ Ptm^\ 


I 

'tm 


(42) 


t=o 


B. NS Design 


In order to obtain some insight for transmit signal de¬ 
sign, in the following theorem, we investigate the asymptotic 
achievable secrecy rate under the assumption that the transmit 
correlation matrices of the users are orthogonal to the transmit 
correlation matrices of the eavesdropper. The notations used 
in the following theorem are summarized in Table III, where 
the subscript “orth” in the variable names indicates that the 
transmit correlation matrices of the users are assumed to 
be orthogonal to the transmit correlation matrices of the 
eavesdropper. 

Theorem 4: If {^im^E t) ~ 0 for / = 

0,1,-- - ,1/, the secrecy rate i^sec, asy is identical to the 
achievable rate of the desired user i^sec, asy, orth = l0g2{l + 
SINRom.asy.orth), where 


SINK 


Om, asy, orth 


PT^m,orth 

pyOb^p^oTth + qi0b,q ,orth 1 


(37) 


with 


^m,orth — tr 


tr( Rom,orth 


^^0m,orth^ 

)M{ 


pO 

■^Om 


pO 

■"^OmjOrth 


A pO ^ 

J -"^OmjOrth J 


(38) 


L K 

^6,p,orth = yy {^Om^lk^ 

1=0 k=l,kj^m 

L 


y^i^'(l^Zm,orth) Aq 


0m,orth 


(39) 


1=1 


^Zm,orth ~ [ P^o'^Nt + ^ Ptm^tm 


t=0 


-1 


r! 


Im' 


(43) 


Proof: Please refer to Appendix D. ■ 

Theorem 4 reveals that when the channels of the eaves¬ 
dropper and the users are statistically orthogonal, the pilot 
contamination attack has no impact on the secrecy rate. It is 
known that for typical massive MIMO scenarios, the transmit 
correlation matrices of the channels are low rank [3,4,6-8, 
10,38]. Hence, inspired by Theorem 4, in the remainder of 
this subsection, we introduce an NS based design where the 
information-carrying signal is transmitted in the NS of the 
transmit correlation matrix of the eavesdropper’s channel H^. 

Assume the rank of ^ is T/, / = 0,1, • • • , L. Let us 
construct a matrix G whose Mi columns are 

the Ml eigenvectors corresponding to the zero eigenvalues of 
R^ T’ where Mi = Nf — Ti. In the uplink training phase, we 
multiply Yi with to obtain^ 

(V^)"" Y, = ^ (V^)"" hWk 

k=l 

1=1 k=l 

+ ^/Pe (V^) " H'gPeWe + (V^)" N (44) 


^The mth user in the Ith cell (/ = 1, 2, • • • , L) is also affected by the pilot 
sequence sent by the active eavesdropper in the reference cell. As a result, 
we assume that the Ith BS also employs the NS design to combat the pilot 
contamination attack. 
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TABLE III: Notation used in Theorem 4. 


Notation 

Description 

SINRq-^^ asy, orth 

Output SINR of the desired user in the asymptotic regime —)■ oo 

^m,orth 

Power of signal intended for the mth user in the 0th cell received by the desired user 

^6,p,orth 

Power of multi-user interference at the desired user 

^6,g,orth 

Power of the AN received at the desired user 

y 

'■0m,orth 

Power of signal intended for the mth user in the Ah cell received at the desired user 


and 


K 

yz,null = vec Y;) = ^ (<^fc ® livj hjfe.null 

k=l 


L K 

+ LI El ® ) ^//c,null 

1=1 k=l 


+ 



Ne 

^ ^ ^ ^eff,r,null 

r=l 


■'■nulb 


(45) 


where — (V^) ~ CAf ^0, R;fe^„uu), Rj/c,nuii ~ 

(V^)"R*fcV^ e I = 0,1,■■■,L, k = 

1,2,--- ,K, and ~ CM{0,tNqImi)- h^ff,r,nuii is the 
rth column of matrix (V^) H^Pe. We obtain an estimate 


Im,nuW 


= V Plm'^[ 


im,nuW 
L 


-1 


-^qIm ~i~ ^ -^tm^tm,null y/m,null5 (46) 


t=0 


where 


L 

yZm,null ~ \/Plm'^^lm,n\i\\ ~b ^ ^ \/null 

t=l 

heff,r,null + (^m (8) Im)^H^u11- (47) 

® r=l 


The actual channel vector can be expressed as h\^ = 

h'm.nuU + eL.nuin ^here ~ CAf (o, RL,„u 1 i) and 
®/m,null — R(m,null) "'hh 




im,null 
L 


I W'oIm + T ^ 


-1 


R| 


im,nu\\’ 


(48) 


t=o 


In the downlink data transmission phase, we employ the 
same transmission scheme as in Section II-B, but replace 

with w/^,nuii = and set p = 1/K, q = 0. 

||^Zm,null II 

Remark 4: The proposed NS design transmits the signal in 
the orthogonal subspace V^. As a result, the performance of 
the NS design depends on the rank of V^. For instance, for 
the extreme case of i.i.d. fading, does not exist and hence 
the NS design is not applicable. In practice, the NS design 
will be beneficial in highly correlated channels, for a strong 
pilot contamination attack, and in the high SNR regime since 


it can effectively degrade the eavesdropper’s performance in 
these scenarios. In contrast, we expect the ME-AN design to 
outperform the NS design in weakly correlated channels, for a 
weak pilot contamination attack, and in the low SNR regime. 


C. Unified Design 

Considering Remark 4, we propose a unified design that 
exploits the advantages of both the conventional MF-AN 
design and the NS design. The corresponding transmit signal 
in the Ith cell, / = 0,1, • • • , L, is given by 


X/ = y/p (^Va ^^/p^WlkSlk + V^Unull,lZ^ 


k=l 


K 


^lm,nu\\Slk + ^ ^IkSlk 

k=l,k^m 


(49) 


where a and p denote the weights of the MF-AN design and 
the NS design with a-\- ^ = 1. Using the secrecy rate in (18) 
as the cost function, the optimal a and p can be obtained from 
a one-dimensional numerical search. 


IV. The Single-Antenna Eavesdropper Case 

In this section, we analyze the performance of massive 
MIMO systems for the case of an active single-antenna eaves¬ 
dropper [43-45]. For the MF-AN design, we derive closed- 
form expressions for the optimal power allocation policy for 
the transmit signal and the AN as well as the minimum 
transmit signal power required to ensure secure transmission. 
Also, we derive a closed-form expression for a threshold that 
can be used to optimally switch between the MF-AN and the 
NS design. Finally, we investigate the single-cell single-user 
massive MIMO system. 


A. Multi-cell Multi-user Case 

We obtain a closed-form solution for the optimal power 
allocation for the MF-AN design in the following theorem. 
The notation used in the theorem is summarized in Table IV. 
Theorem 5: Let us define 


Pi = -- 


(aiC2 - a2Ci) 
aib2 - a2bi 


\J (aiC2 - a2Cif' - {aib2 - a2&i) (&i - ^ 2 ) ci 


aib2 — 02^1 


( 50 ) 
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TABLE IV: Notations used in Theorem 5 


Notation 

Description 

dl, 61 , Cl 

aip^ + 6 ip + Cl is the numerator of the ratio between 1 + SINRom, asy and 1 + SINReve, asy when A^g = 1 

Ci2, 62 , C 2 

+ 62 P + C 2 is the denominator of the ratio between 1 + SINRom, asy and 1 + SINReve, asy when Ne = 1 

0e,e 

Power of the signal intended for the mth user in the 0th cell received at the eavesdropper when Ne = 1 

Se,q 

Power of AN received at the eavesdropper when Ne = 1 

_Ae_ 

Power of the signal intended for the mth user in the Ith cell received at the eavesdropper when Ne = 1 


and 

P2 = 


(aiC2 — <22^1) 
aih 2 — 

\J {aiC 2 - a 2 Cif - {aib 2 - a2&i) {h - 62) ci 


(51) 


aib2 — (12^1 

where 

ai = -72 {{Nt -K)0rn- {Nt - K) 9^,^ - K9b,g) 

(52) 

= 7 {{Nt -K)em + {Nt - K) 0b,p - K0b,q) 

X {70e,, + Nt-K) 

+ 7 ( 7 ^ 6 ., +Nt-K) {{Nt - K) 0e,5 - i^0e,g) (53) 

Cl = (7^6,9 + (7^e,, + - i^) (54) 

02 = 7 ' {{Nt - K) 0b,p - K0b,q) ((TV* - i^) 0e,e - i^0e,,) 

(55) 

(>2 = 7 {lOb,q + Nt-K) {{Nt - K) 0e,e - i^0e,,) 

+ 7 ((A^t - K) 0b,p - X0b,,) (7^e,<, + iVt - if) (56) 
C2 = (7^b,9 + iVt - if ) (7^ew + iVt - if ), (57) 


with 


0 «.. - 


tr 


(rl)’ 


(58) 


L K 


Proof: Please refer to Appendix E. ■ 

A fundamental question in secure communication is under 
which conditions a positive secrecy rate is achievable. Eor 
massive MIMO systems under the pilot contamination attack, 
this question is answered in the following theorem. 

Theorem 6 : Eor A^g = 1, to achieve i?sec,asy > 0 in (24), 
the power allocated to the transmit signal must satisfy^: 

hi - 62 


p > —- 


p < — 


ai — 02 
hi - 62 


if ai — a 2 > 0 


, if ai — a 2 < 0 . 


(62) 


(63) 


ai — 02 

Proof: Eqs. (62) and (63) can be obtained by following 
a similar approach as in Appendix E and finding the solution 

l + SINRpyjT,^ asy ^ -j H 

1 + SINReve, asy 

In the following, we derive a threshold which al¬ 
lows us to determine whether the ME-AN design or the 
NS design achieves a higher secrecy rate. Before pro¬ 
ceeding, we introduce some definitions. Define as = 

^3 = + P'^^b,p + 

q*h,q+P*Sm, a4 = {p*0b,p + q*0b,q) {p*9e,e + 0*0e,q), h = 
P'^^b,p + +P*^e,e + where p* and g* are the 

optimal power allocation values obtained from Theorem 5, 
^5 — (^6, p, null null) 9 3.nd oq — ^^6,p,nuii9 where 


^m,null — tr ^Rom,null^ 

+ tr (R-Om.null) tr (^Rom, 


_ p>0 

null -*^0771,null 


) I^0m,null) 


(64) 


and 


K 


^e,q = 




^6,p,null — ^ ^ tr^Rj;.^ tr ^Rq^RI;.^ 

Z=0 k=l,k^m 

L 


1=0 


1=0 k=l,kj^m 




A; 


0 m‘ 


(65) 


1=1 


1=0 


A^e (59) 


Eurthermore, define oj = o^oq — 04 ^ 0 ^, 67 = ae^s + as — 
as 64 — a4, C7 = ae + 6s — as — 64, two fixed point equations 
for 7 


and 



/^/ - TYl 1 T 1 

—67 + ~ 4a7C7 

—67 — ^67 — 4a7C7 


J - lliili 

207 

2 oj 


( 66 ) 


' Ptmtr {CLf). (60) 


t = 0 


7 = max 


—67 “h ^67 — 4a7C7 —67 — ^67 — 4a7C7 

2a7 2 oy 


Then, the optimal power allocation p maximizing the asymp¬ 
totic achievable secrecy rate in (24) for A'e = 1 is given in 
(61) at the top of the next page, where ifsec,asy {p) is defined 
in (24). 


(67) 


^When ai — a 2 = 0 , if 61—62 > 0 , then secure transmission can 
be achieved for any p; otherwise, secure transmission cannot be achieved 
regardless of the value of p. 
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P 


* 


' 1 , 

arg max asy (1) 5 -^sec, asy (Pl)} 7 

arg max {i?sec, asy ^1) , Rsec, asy (Pi)}, 
^ argmax{i?sec,asy ^1) , Rsec, asy 


if Pl^[0,l],P2^[0,l], 
if Pie[0,i],p2^[0,i], 

if Pi ^ [ 0 , 1 ],P 2 e [ 0 , 1 ], 

asy (P2)} , if Pi e [0, 1] , P2 e [ 0 , 1] , 


(61) 


and A = bj — AujCt. We note that ( 66 ) and (67) are two 
fixed point equations since as, 63 , a^, and 64 are functions 
of 7 . Denote the solution of ( 66 ) and (67) by 7 t,i and ^t, 2 , 
respectively, and define 

1 , if (A < 0 and ay < 0 ) or 
o ( N j (A > 0, ay > 0 and 7t, i < 7 < 7t, 2 ) or 
^ I (A > 0, ay < 0 and (7 < 7t, 1 7 > oror 7 t, 2 )) 

0 , otherwise 

( 68 ) 

Then, we have the following theorem. 

Theorem 7: For Nt ^ oo and Ae = 1, if ( 7 ) = 0, the 
asymptotic secrecy rate of the MF-AN design is higher than 
that of the NS design; if ( 7 ) = 1, the opposite is true. 

Proof: Please refer to Appendix F. ■ 


B. Single-Cell Single-User Case 

To provide more insights into the impact of the pilot 
contamination attack on secure communication in massive 
MIMO systems, we simplify the system model to the single¬ 
cell single-user case in this subsection. The transmitter (Alice) 
sends the desired signal to the receiver (Bob), and an eaves¬ 
dropper (Eve) is present to overhear the signal, i.e., we have 
L = 0, K = 1, and Nq = 1 [24-26]. We investigate again 
under which condition a positive secrecy rate is achievable. 
With the simplified model, in the following theorem, we obtain 
a more intuitive condition than the one in Theorem 6 . 

Theorem 8 : For a single-cell single-user single-antenna 
eavesdropper system (L = 0,K = l,Ae = 1), to achieve 
Rsec, asy > 0 in (24), the following condition must be satisfied: 

(p-l)7Pi<P2, (69) 

where 


m = [ 


(tr2(<)+tr ((<-<)<)) 
X (tr(R^,7tr(R0i) - a) 

R0i-R0i)R°i)+tr(R0i)tr(R0i 



A 


(70) 


V 2 = 


(tr2 (rO^) + tr ((rOi - ROi)) - a] tr 


(71) 


A = r^PoVr + r^PoiP^ltr T 

+ rPoiNotr {0^11% ^n) (72) 


f2 = ROi(iVoIiv*+T(PoiR[]i + P£R^,7) \ (73) 


Proof: Please refer to Appendix G. ■ 

Remark 5: From (69), we obtain that coefficients rji and 
r ]2 determine whether secrecy can be achieved. In the high 
SNR regime when 7 cx), if 771 >0, (69) holds for arbitrary 
p < 1 and secure communication can be achieved; if r]i < 0 , 
(69) holds only for p > 1. However, p denotes the fraction of 
power allocated to the transmit signal and satisfies 0 < p < 
1. This means that if rji < 0, (69) can not hold and secure 
communication can not be achieved. 

In the following, we provide a concrete example for when 
771 < 0 may occur. 

Theorem 9: Consider i.i.d. fading, i.e., Rqi = Poi'^Nt ^nd 
T = where f3oi and Pe denote the path-losses for 

the desired user and the eavesdropper, respectively [43,44]. 
Then, 771 ^ 0 is equivalent to Pqi/^oi ^ PePe- 

Proof: Please refer to Appendix H. ■ 

Theorems 8 and 9 imply that if the active eavesdropper 
increases the power of the pilot contamination attack, the 
classical MF-AN design [40] may not be able to achieve secure 
communication. Hence, a new design is needed to facilitate 
secure communication in massive MIMO systems. 

Remark 6: If 771 = 0 and 772 > 0, then (69) is always 
satisfied. Hence, secure communication is achievable regard¬ 
less of the pilot contamination power Pe and SNR 7 . The 
question is how 771 = 0 and 772 > 0 can be achieved. Clearly, 
in a conventional massive MIMO setting with i.i.d. channels, 
as in [34], this condition is satisfied with low probability, 
because for small-dimensional MIMO channels, both Rq^^ and 
^ET in (70) are full rank positive definite matrices, such 
that 771 = 0 in (70) is difficulty to achieve. However, a 
unique feature of massive MIMO channels is that the transmit 
correlation matrices of the channels are low rank [3,4, 6 - 8 , 
10,38]. Therefore, for massive MIMO systems, it is possible 
to perform joint uplink and downlink processing as in Section 
III-B to project the channels of the users and the eavesdropper 
into the null space of R^ For this NS design, the condition 
in (69) still holds after replacing Rq^ and R^ ^ in (70) and 
(71) with Rq^ and 0, respectively. In this case, we obtain 
771 = 0 and 772 > 0. In fact, this is the intuition behind the 
NS design proposed in this paper. Unlike the conventional NS 
design for the perfect CSI case [24], the proposed NS design 
transmits along the statistical eigen-direction of the channel. 
Moreover, since the pilot contamination attack affects both the 
uplink channel estimation and the downlink data transmission, 
the proposed NS design requires a joint uplink and downlink 
processing to completely eliminate the impact of the pilot 
contamination attack, see Section III-B for details. 
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V. Numerical Results 


In this section, we provide numerical results to evaluate the 
secrecy performance of the considered massive MIMO system 
with an active eavesdropper. We consider a system where a 
uniform linear array with Nt = 128 is employed at the BS, the 
antenna spacing is half a wavelength, and the angle of arrival 
(AoA) interval is ^ = [—tt, tt]. We use the truncated Laplacian 
distribution to model the channel power angle spectrum as [51] 


p{0) = 




V2a (^1 - 


(74) 


where a and 0 denote the angular spread (AS) and the mean 
AoA of the channel, respectively. We assume that the AS 
a in (74) is identical for the channels of all users and the 
eavesdropper and we set a = 7r/2. The channel transmit 
correlation matrices of all users, and the eavesdropper, 
are generated based on [51, Eq. (3.14)]. For the channel 
between the user and the BS in its own cell and the channel 
between the user and the BSs in the other cells, we impose 
a channel power normalization to make the trace of the 
channel transmit correlation matrices equal to Nt and pNt, 
respectively, and set p = 0.1. The receive correlation matrices 
of the eavesdropper, are generated using the exponential 

correlation model {R^^i^}. . = G ( 0 , 1 ), where (p 

is generated at random. We note that for any precoder Pg 
satisfying (13), the resulting ^ in (3) and (5) is the same. 

In the simulations, we set s = 1, 2, • • • , A'e- 

For the channel between the eavesdropper and the 0th BS 
and the channel between the eavesdropper and the other BSs, 
we impose a channel power normalization to make the trace 
of the channel receive correlation matrices equal to Ne and 
pNe, respectively. The asymptotic secrecy rate is computed 
based on Theorem 2 and the exact secrecy rate is obtained 
by Monte Carlo simulation. We set L = 3, AT = 5, Pik = 1, 
A: = 1, 2, • •. , / = 0,1, • • • , L, r = 10, and A^o = 1. The 

mean channel AoAs, 0, of all users and the eavesdropper in 
(74) are generated at random and the channel AoAs, 0, of all 
users and the eavesdropper are distributed within the angle 
interval [— tt, tt] according to (74). 

Figure 4 shows the secrecy rate performance versus (vs.) 
SNR 7 for the MF-AN design, Pe = 1, different p, and 
different Ne. We observe from Figure 4 that the asymptotic 
secrecy rate in Theorem 2 provides a good estimate for the 
exact secrecy rate. Also, we observe from Figure 4 that in 
the low SNR regime, allocating more power (larger p) to the 
information-carrying transmit signal leads to a higher secrecy 
rate. However, as the SNR increases, the secrecy rate drops 
significantly if the transmit signal power is high and the AN 
power is small. For example, for SNR = 2 dB and Ne = I, 
we find from Theorem 6 that p < 0.15 is a necessary condition 
to guarantee reliable communication. Thus, for p = 0.16, 
a positive secrecy rate cannot be achieved, as confirmed by 
Figure 4. In addition, we observe from Figure 4 that for 
the MF-AN design, increasing Ne results in a secrecy rate 
degradation. 

Figure 5 shows the secrecy rate performance vs. p for the 
MF-AN design, Ne = 1, Pe = 1, and different SNRs. For 



Fig. 4: Secrecy rate vs. SNR for Pe = I, different p, and 
different Ne. 


l.5r 


■ Exact Secrecy Rate for SNR = -10 (dB) 

■ Asymptotic Secrecy Rate for SNR = -10 (dB) 

■ Exact Secrecy Rate for SNR = -4 (dB) 

■ Asymptotic Secrecy Rate for SNR = -4 (dB) 

■ Exact Secrecy Rate for SNR = 4 (dB) 

■ Asymptotic Secrecy Rate for SNR = 4 (dB) 

' Optimal p 

■ Transmit Power Threshold for SNR = 4 (dB) 



0 0.02 0.04 0.06 0.08 0.1 0.12 0.14 

P 


Fig. 5: Secrecy rate vs. p for A^e = 1, Pe = and different 

SNRs. 


K = 5, we know from Section II-B that 0 < p < 0.2. 
Figure 5 confirms that the asymptotic secrecy rate in Theorem 
2 provides a good estimate for the exact secrecy rate. Also, 
we observe from Figure 5 that the maximum of the exact 
secrecy rate is achieved for the optimal power allocation 
solution provided in Theorem 5. Furthermore, for SNR = 4 
dB, a positive secrecy rate cannot be achieved when p is 
larger than the analytical transmit power threshold provided 
in Theorem 6. As the SNR increases, more power has to be 
used for generating AN, in order to achieve reliable secrecy 
transmission. 

Figure 6 shows the exact secrecy rate performance vs. SNR 
7 for A^e = 1, Pe = 1, and different system designs. For 
the MF-AN design, we adopted the optimal power allocation 
p and q based on Theorem 5. For the NS design, when an 
eigenvalue of R^ ^ is less than 10“^, we treated it as being 
equal to zero. Based on this, we obtained Ti and according 
to Section III-B. For the unified design, we obtained the 
optimal a and (3 by performing a one-dimensional numerical 
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Fig. 6 : Exact secrecy rate vs. the SNR for Ne = 1, Pe = 1, 
and different precoding designs. 



Fig. 7: Exact secrecy rate vs. Pe for A^e = 1, 7 = 10 dB, 
and different precoding designs. 

search. For comparison, we also show results for a naive MF 
precoding scheme, where p = IjK and AN is not generated. 
From Figure 6 , we make the following observations: 1) The 
unified design achieves the best performance for all considered 
SNR values. 2) Because of the pilot contamination attack, 
even though the transmitter is equipped with a large number 
of antennas, naive MF precoding cannot achieve a positive 
secrecy rate for moderate-to-high SNRs. 

Figure 7 shows the exact secrecy rate performance vs. Pe 
for A^e = 1, 7 = 10 dB, and different system designs. We 
observe from Figure 7 that the unified design performs best 
for all considered Pe values. For a weak pilot contamination 
attack, the MF-AN design performs better than the NS design. 
However, when the eavesdropper increases its pilot power, this 
leads to a serious secrecy rate loss for the MF-AN design, but 
has barely any impact on the NS design. This is because the 
NS design can eliminate the impact of the pilot contamination 
caused by the active eavesdropper as suggested by (48) where 



Fig. 8 : Exact secrecy rate vs. Ne for = 1, different 
system designs, and different SNRs. 


the term j. disappears in the covariance matrix of the 

estimated channel. When Pe = 0.1 and Pe = I, Theorem 
7 indicates that, for 7 = 10 dB, the ME-AN design and the 
NS design perform better, respectively, which is confirmed by 
Eigure 7. 

Eigure 8 shows the exact secrecy rate performance vs. Ne 
for Pe = 1, different system designs, and different SNRs. 
We observe from Eigure 8 that the unified design performs 
best for the considered SNR values. Also, the secrecy rate 
of the unified design barely decreases with increasing Ne. 
This confirms that the unified design is an effective approach 
for combating the pilot contamination attack. In contrast, 
the secrecy rate performance of the ME-AN design degrades 
significantly with increasing Ne. 
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VI. Conclusions 

In this paper, we have studied the transmit signal design for 
multi-cell multi-user massive MIMO systems in the presence 
of a multi-antenna active eavesdropper. Eor the ME-AN design, 
we obtained an asymptotic achievable secrecy rate expression 
for the pilot contamination attack when the number of transmit 
antennas tends to infinity. Moreover, we proved that the impact 
of the active eavesdropper can be completely eliminated when 
the transmit correlation matrices of the users and the eaves¬ 
dropper are orthogonal. This analytical insight motivated the 
development of transmit signal designs that are robust against 
the pilot contamination attack. Also, for the ME-AN design 
and a single-antenna eavesdropper, we derived closed-form 
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expressions for the optimal power allocation policy for the 
information-carrying transmit signal and the AN as well as 
the minimum transmit signal power required to ensure secure 
transmission. In addition, for the single-antenna eavesdropper 
case, a decision threshold for determining whether the MF-AN 
design or the NS design is preferable was provided. Monte 
Carlo simulation results showed that the derived analytical 
results are accurate and confirmed the effectiveness of the 
proposed transmission schemes for combating the pilot con¬ 
tamination attack. 

Appendix A 
Proof of Theorem 1 


For the denominator of (20), we have 


1 I, 0 ,2 (hL)"h°,(h0y(h0^) 

(ho J wofc =- -J—WT. - 


uO ) uO 


Nt^oo J ^Om^Ok 


^ 0 /c) ^ 0 /c 


Nt^oo i^Om^Ok 




First, recalling the definition of Wg, we have Also, performing some simplifications, we obtain 


WgWf 

Then, the constraint in (II-A) reduces to 


tr(PeliV,l^^Pf) =tr (^Pr) (X^Pr) < Ne- 


_-p 0 


Also, (12) can be re-written as 


^ /uO "l^TT ^ 1 -pO 

jy V^Omj ^null,0 ^ -^Om 

- ^ tr(Rofe) (ho^)^ (hofc) (hofc) h^m 

^ k=l,k^m 

- Ttr(R0^)“\h0^)"' (£0^) (81) 


k=l,k^m 


5 ; {P?R%.nPe }„ = Y.tl <P?P%.RPeO- 

r=l s=l r=l s=l 

Nr Nr 

= '^Y2Pr'^E,RPs 




For m ^ k, is independent of hg^. Hence, the asymptotic 
expression for is given by 


Define p = X]r=i P^- Considering (76), (77), the optimization 
problem in ( 12 ) is equivalent to 

max ^p (78) 

p 

s.t. tr(pp^)<Are. 

It is easy to show that the optimal solution of (78) is 
p = v^AgUg, where Ug is the eigenvector corresponding to 
the largest eigenvalue of This completes the proof. 

Appendix B 
Proof of Theorem 2 

First, we calculate SINRom in (20) for Nt ^ oo. For the 
numerator of (20), based on [52, Corollary 1], we have 

1 r 0 ^ 

(hom) Wo„ 


iV.^oo ^ go 2 ^ 

Nt ^ Nt 




^ ]^tdRo„j + - 


1 tr (( Rq^ Rq^ j Rq^ 


tr 


• (79) 


tr(R 0 „R']fe). (82) 

For m = k, based on (3), we have 

L 

h°m = y] x/i^rhL 

1=1 

fpT JVc 

+ + (83) 

® r=l 

where Cq^ is defined in (31) and flrn = (^m C) 

Based on (83), we obtain 

(hom) hg^ 

^ E E (hi) ^ (Cl) ""hi + r2 

t =0 s =0 ^ ^ 

L _ Ne 

X (hD^'ciy^v^hig (h°;,,)''(ci)''hi 

t =0 r=l 

+ r(hl)''cl^ x/ii:hln^f2^(Cl)''hl 

t =0 

Ne ^ 

+ r/N(hl)"'ciy^hl(hl) hi. (84) 

r=l 

When Nt oo, based on (84) and [52, Corollary 1], we 



16 


have 




0 

Om 


iV.^oo (hO^) f2 Ptmh^tm (hL) (C^) 


Om 


t =0 

Ne 


Ne 


+ (hO^,,)"' (CD^'hL 

^ ® r=l r=l 

+ ^(hO„)"c°„J^„n(CO„J^„n)"hO„ 

Nt^oo 1 _ 2 p /i_o ^^r^o i_o /i_o ^^fr^o \^uo 

j\^ ' ^Omy^Orn) '^Om^OmV^Om/ v'^Om/ ^Om 


V 


(hO^)""cL E (hL)" (CL)"hL 


t=l 


-, p Ne Ne 

+ ^J^^JKmfC^Omf^^E,rYli^%rf (CL)''^ 


r=l 


r=l 


+ ^(hL)''cLf^mn(CLf^mn)"h: 


■^uO 1 aO 




Om 




0m‘ 


(85) 


Also, for m ^ k, hg^ is independent of and we obtain 
in ( 21 ) 


1 


(hL)^w,fe 


_/V( (^°™ 




Hk 








hZ 


hZ 

^Ik 



■'■Om 


(^Z/c) ^Om^lk Nt^oo (^Om^^Z/c) 


N f^ oo 




hi 


Z/c 


tr 


(fiL) 


( 86 ) 


For m = k, similar to (85), we have 


N, 




2 _ 1 (hL)^hL(hL) hL 


Nt 


Nt^co 1 AL 


Zm 




t tr 


(rl)' 


(87) 


Next, we simplify 


(hom) Unull, Z^Om 


Z 

Om 


tr(RL)- E (hL)"" (hifc) (hi,) h; 

/c=l,Zc 7 ^m 

(RL)”'(hL)'' (hL) (hL)"'hL. (88) 


— tr 


Following a similar approach as was used to obtain (82) 
and (85), we obtain 


hL'^‘^°°tr(RLRi,) (89) 


^(hL)" (hi,) (hi, 

^(hL)"" (hL) (hL)''hL'^*^"°Ai 


z 

Om‘ 


( 90 ) 


By substituting (79)-(90) into (20), we obtain the expression 
for SINRom.asy in (25). 

Next, we simplify (22). First, we have 


(H^) Un^n.iULuH^ 

= (hL'' (liv* - Hldiag tr (Rli)"\tr (r^)"',- ■ ■ , 
tr (rL)”' (h1)") = (H^)"h^ - Qh (91) 

where 


Qh = (h^)''h: 


xdiag 


Om 


tr(Rli) \tr(Rl 2 ) ',•.•,&(%) 1 (h') V 


z 

E- 

(92) 


For we have 

(H* 


L^Ha,. = (hyX. 

j ij 

= ef(RLL'^'(CB)"'(RkT)'^' 

^ (RLt) ^ C£(R£;fl) ^ ©j 

= tr (ef (rLa) (GL ^ (rLt) 


"^‘^^tr ((RLK)'^'e,ef (R^ tr (R^t) 


(93) 


where we used [53, Eq. (102)]. Then, performing some sim¬ 
plifications, we get 


{QH}ij — {^E,i) h^j. 


k=l 


(94) 


For m ^ k, • and hp ^ are independent of Thus, we 
have 


{^E,i) ^\k(^\k^ ^E,j — (^Ik^ ^E,j{^E,i) 


H:: 


Hk 




= ef (RLa) (G'b) "" (Rkr) '^'r1 


ik 

X (RLT)'^'G^RLL'^'e,- 


Nf^oo 


{RL^tlijd^ (rL^rI,) ; 


(95) 


where (95) is obtained based on [52, Corollary 1] and [53, Eq. 

( 102 )]. 
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For m = k, similar to (85), we have 


and 


(h^,,)"hL(h: 


CLhL(hL) (CL) 


Nf^oo 2 

^ r 

>Pe 


Im J ^E,j 


t =0 
Ne Ne 


+ r" 


N,. 


^\m^E,r{^E,t) {^\m) ^E,j 


r=l t=l 


(h^,)"cLh^,,(h^,)"(cL)"h^,, 

= efiR^E,Rf\G‘Efi^E,Tf" 

^ G\mi^E,T) ^ ^ e-r 

X ef (G^)"" (R^,r)(CL)"" 

(C;^R^ 7 ^) tr ^(C;^) R^.t) 

= {^E,R}ir{^E,R}tj\^^ {^\m^E,T)\ * 

Similarly, we have 






Ne Ne 


^\m^E,r{^E,t) {^\m) ^E 


r=l t=l 
Ne 


Nt^oo 


Ne 


r=l 


r=l 


{h^E,ifcl^^„,nn^n^ (CL) 


Nt^OO 


Combining (23), (91)-(99), we have 


Q'^‘^~Qasy. 


Based on (100), we obtain 


N f^ OO 




which can be further simplified using 


1 


^Om 


' Nt^oo 


^ tr(Rom) 


,0 

^Om 


(h°^) u%Q;^^{u%fh\ 

Ne Ne ^ 

= EEfQ4)«K) K,.)K.)"£S 

i=l j = l 

Ne Ne ^ 

= EEfQ-y)«(»l.)''hS,„(£»„) h%„ 


+ (h^,,) Cl^n^r^nn^n^iClJ h^Ej- (96) 

Then, based on [52, Corollary 1] and [53, Eq. (102)], we obtain 


Nt^oo 


i=l j=l 

Ne Ne 

EE{q-,)«4. 

i=l j = l 


(103) 


which was obtained by following a similar approach as was 
used to obtain (100). Substituting (102) and (103) into (22) 
completes the proof. 

Appendix C 
Proof of Theorem 3 


When p = 


can be simplified to 


K’ l + SINReve, asy 

1 + SINRom, asy _ 7^6, p + 7^m + 1 


(97) 


1 H- SINReve, asy + 1 ) (^jOe + 

The derivative of (104) with respect to 7 is given by 


(104) 


d 


yZ {^kl?}r7 1^^ {^\m^E,T) | (98) 


7^b,p+7^m + l 
(7^b,p + l) ( 7^6 + 1 ) 

— {^b,p + ^m) ^6,p^e7^ ~ ~ 

( 7 ^ 6 ,p + 1)^ (^7^e + 1^ 


(105) 


From (27) and (28), we observe that > 0 and Oi^^p > 0. 
Next, we prove Oq > 0. From (33), we obtain 


Ne 


iVor{R'B,^}.7r (r^,^CL(CL)'') . (99) 




i=l 


Ne L 

1=1 t=0 


+ '^^7^ 1^“' (^Om^E.r) I 53 53 53 

® i=l r=l r=l 

Ne 

+ iVortr (R°B,rCL(Cl]™)"') 5] (106) 


Ne Ne 


Ne 


( 100 ) 


i=l 


( 101 ) 


( 102 ) 


Since r is a receive correlation matrix, it is a Hermitian 
positive-semidefinite matrix. Therefore, we have {R^ . . > 

0. As a result, we obtain 

t=0 

(107) 

iVor{RO^,^}..tr (R°B,rCL(CD") > 0 . (108) 



Also, we have 
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Ne Ne Ne 

i=l r=l r=l 

> 0 (109) 

From (36), (106)-(109), we obtain <9e > 0. As a result, the 
equation 

- {0b,p + Om) Objel^ - 2^0b,p0m + = 0 ( 110 ) 

has at least one non-positive root. We assume that 71 and 
72 . 7 i < 72 are the two roots of (110) and 71 < 0. Since 
- {0b,p + Om) 0b,p0e < 0 , we have 

1) When 7i < 7 < 72 , 

~ {^b,p + ^m) ^ 6 ,p^e 7 ^ ~ 2 ^0b^p0m + ~ ^ 0 . 

2) When 7 < 71 or 7 > 72 , 

{^b,p 3“ ^m) ^b^p^e'l 27^6,p^m ^ 0. 

Since 71 < 0, 7 < 71 can not hold. When 7 > 72 , we know 
from (105) 


Appendix E 
Proof of Theorem 5 

When Ne = 1, (26) reduces to 

SINReve.asy= 7^7 T 

Hence, maximizing Rsec, asy in (24) is equivalent to maximiz¬ 
ing 

1 + SINRpyy^^ asy _ + biP + Cl (119) 

1 + SINReve, asy «2P^ + ^2P + ^2 ‘ 

By taking the derivative of (119) with respect to p, we obtain 

j f aip^ Ebip-\-ci \ 

\a2p‘^Eb2pEc2 J 

dp 

_ (ai &2 - « 2 ^i)p^ + 2 (aiC 2 - a 2 Ci)p + 61 C 2 - 62 C 1 
(a 2 p 2 + & 2 P + C 2 )^ 

( 120 ) 

The proof is completed by setting (120) to zero and finding 
the solution. 


J I 7^b,p+7^m + l \ 

\ (7^b,p + l) (7^e-|-l) j 

-^< 0 . (Ill) 

(27 

Finally, setting 7 th = 72 in Theorem 3 completes the proof. 

Appendix D 
Proof of Theorem 4 

Since and ^ are positive semi-definite correla¬ 

tion matrices, Ylt=o {^im^E t) — ^ i^ equivalent to 

Ef=o R-fmR-kr = 0- Ef=o 

(a) 

( 112 ) at the top of the next page, where = follows from 
the matrix inversion lemma [54]. Similarly, we can prove that 
when X;f=o R^R'e = 0 , reduces to 
Also, when RimRkT = 0> we have 


Rkr(CL)''= RkrRL + r 

L \ 

-1 

t=o J 

= 0 , 

(113) 

and as a result. 

tr(RLcLRkT(CL) 

«)^o, 

(114) 


= 0 , 

(115) 

tr {^E,T^\m) = 0 - 


(116) 

Substituting (114) into (33), yields 

vlj = 0 . 


(117) 


The proof is completed by substituting (112)-(117) into (24). 


Appendix F 
Proof of Theorem 7 


Based on Theorems 2 and 5, the optimal asymptotic secrecy 
rate for the MF-AN design is given by 


K 


sec, asy 


l 0 g 2 


asl ^ +637 + 1 

a47^ + (*47 + 1' 


( 121 ) 


Following a similar approach as in Appendix B, we obtain 
the asymptotic secrecy rate of the NS design as 




sec, asy, null 


= l 0 g 2 


a57 + 1 
067 + 1 ’ 


( 122 ) 


Performing some simplifications, i?*ec,asy ^ -Rsec, asy, null 
is equivalent to 


+ C 77 = 0 . 


(123) 


Then, Theorem 7 is obtained by finding the feasible region 
of (123). 


Appendix G 
Proof of Theorem 8 


Following a similar approach as in Appendix B, when L = 
0 , K = 1 , Ne = 1 , and Nt oc, SINRqi, asy in (25) becomes 
(124), which is given at the top of the next page. 

Also, SINReve, asy in (26) becomes 


SINR 


eve, asy 


pjA 

97 (tr (R^.t) tr (Roi) - a) + tr 

(125) 


For secure communication, we require SINRqi, asy > 
SINReve, asy, which is equivalent to (126) at the top of the 
next page. 
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^\m — ^ ^tk^tk + ^E'^E,R^E,T ) ) 
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im 


^t =0 


= Pi^rRL ( ( V^Iiv* + ^ E PtA ) ( V^Iiv. + 
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_ p ,-Ri /^T I 

— ^ImE^im V H 7= -rt£;,T 
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—^ P 'rPJ ^ 

— nruTti-im 


ViVo 

tPetK 




L ' 

= PimT'Rjm ( liVt P ^ ' Ptk^tk 1 


E,R -p I j I 
-^£;,T 


+ VTVo 

tPet^ 


y/N^ 

L 


E,T 


r; 


im 


r' 


Im 


t =0 

-IN 


iVo 


EiR tyl 

^E,T 




-1 


■iVt 


x/iVo 




R! 


Im 


t =0 


I 

Im 


( 112 ) 


t=o 


SINRoi,asy = 


_ P7 (tr^ (Rgi) + tr ((Rgi - Rgi) Rgi)) _ 

</7tr ((r8i - R8i) R8i) + 97tr (r^i) tr (ro^ - RO^) + tr (ro^) ' 


(124) 


P7 (tr^ (r8i) + tr ((r8i - Rgi) R8 i)) 


pjA 


97tr 


Rgi 


_ \ \ _ / __ / _ /_/ _ ^ _ EJ. _ 

- Rgi) Rgi) + g7tr (r^i) tr (ro^ - RO^) + tr (ro^) 97 (tr tr (ro^) - a) + tr (ro^) ' 


(126) 


When Al( —> 00 and Alg = 1, we have 


hp.i 


hoi 


' N f^ oo 


tr (R ^^7 


I tr 




(fiSi) (127) 
(128) 


Exploiting the Cauchy-Schwarz inequality, we obtain 


(hE,i) hoi (hoi) h^j 
Therefore, we have 


< 


hfi,! 


h^i 


(129) 


tr (R^.t) tr (Rqi) - a > 0. (130) 

Moreover, based on (5), we have 

T> 0 -D 0 

■^01 -^01 

= R^i (TVoIiv, + r (PoiR°i + PbR^,t))“' 

X (AIoIaij + TPeII%^t) 

= Rjji (liv* + rPoiRSli (iVoIiv. + tPeR^^tV^) 

(131) 


Since Rqi and R^ ^ are transmit correlation matrices, they 
are Hermitian positive-semidefinite matrices. From (5) and 
(131), we observe 

tr (r^i) > 0, tr (r°i - ROi) > 0. (132) 

Eqs. (130) and (132) indicate that the denominators of both 
the left hand and the right hand terms in (126) are positive. 


Then, simplifying (126), we obtain (69). This completes the 
proof. 

Appendix H 
Proof of Theorem 9 

Setting Rq^ = PoilNt R^ t = we have from 

( 10 ) 

so ^ _ 'T-Poi^Ol _. 

No + T (Poi/3oi + PePe) * 


(133) 


tr (r^i) 

tr((R 0 i-<)<) 


rPoi^oi^t 


Nq-\- T (Poi/3oi + PePe) 

tPoiPqi {No + tPePe) Nt 


(134) 


tr (r^i - R^i) 


{Nq + T (Poi/3oi + PePe)) 

(135) 

Poi {No + TPePe) Nt 

(136) 


No + t {PoiPoi + PePe) 


A = 


tPoiPoiPeNi 


{No + T {Polpol + PePe)^ 

X {tPoiPoi + rPEpENt + Nq) (137) 
tr (R^,r) = pENf (138) 

Substituting (133)-(138) into r]i in (70), recalling Nt oo, 
and simplifying, we obtain 

Vi = (^^01^01 + EPePe + Nq) (Pqi^oi - PePe) • 

(139) 

This completes the proof. 
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